Carl Franzen, of TPM Idea Lab:

There are two cases where the FTC believes that companies need to get a consumer’s “affirmative express consent,” that is, an “opt-in,” before using information captured via facial recognition: When identifying anonymous individuals to third parties that wouldn’t otherwise know who they were, and when using any data or imagery captured via facial recognition for purposes outside of what was initially stated by the company.

This is good news because it signals awareness on the part of the FTC that this is an issue. Mr. Franzen provides some good context in his article, so if this stuff interests or worries you, click through to read his analysis. You can also find the FTC’s press release on the issue here, the report itself, in PDF format, here, and the dissenting statement of Commissioner J. Thomas Rosch, also in PDF format, here.